1. Zero-Server Architecture & Document Security
GraphPages.com is deliberately architected to eliminate server-side document processing. When you adjust millimeter grid spacing, change line colors, draw geometric shapes, or export a 50-page vector PDF, all computational operations execute directly on your local device using standard HTML5 Canvas 2D contexts, Web APIs, and client-side JavaScript libraries (such as jsPDF).
At no point during the generation, preview, editing, or export processes are your drawings, coordinates, text annotations, or generated PDF/PNG files transmitted to our servers or any third-party cloud infrastructure. Your documents exist solely in your device's volatile memory and local storage.
2. Information We Do Not Collect
Because our core tools operate without user accounts, we do not collect:
- Personal Identifiable Information (PII) such as full names, home addresses, phone numbers, or government IDs.
- Account credentials, passwords, or authentication tokens.
- Drawing contents, vector paths, sketch layers, text notes, or project metadata.
- Payment information or credit card numbers (our service is 100% free).
3. Browser Local Storage & Client Persistence
GraphPages uses standard browser localStorage strictly for convenience and usability enhancements. This data remains on your local machine and is never synced to external servers:
- graphpages-theme: Stores your selected theme preference ('light', 'dark', or 'auto') to prevent screen flash (FOUC) when navigating pages.
- Virtual Studio Autosave Draft: Caches your active sketching canvas locally in your browser so you do not accidentally lose your work if your tab or browser is closed.
- Last Selected Presets: Remembers your preferred paper size, unit preference (mm vs inches), and active paper style.
- You can clear all stored data at any time via your browser's site settings or privacy options without affecting the functionality of the site.
4. Shareable URL Hashes (#drawing=...) & RFC 3986 Compliance
When you use the 'Copy Share Link' feature in the Virtual Studio, the entire drawing state is compressed using lz-string and appended as a URL hash fragment (e.g., https://graphpages.com/studio/#drawing=...).
In accordance with standard Internet protocol specifications (RFC 3986), URL fragment identifiers (the portion following the '#' symbol) are strictly processed by your browser client and are NEVER transmitted to web servers in HTTP request headers. When a recipient opens your share link, their browser decodes the drawing locally without the server ever seeing the content.
5. Standard Web Server Logs & Content Delivery
Like virtually all websites, our static hosting platform (e.g. Vercel / Cloudflare edge network) may automatically log standard, non-identifying technical HTTP request headers for security, debugging, and DDoS prevention. These transient logs may include: your IP address, browser type (User-Agent), referring URL, date and time of request, and the specific static asset requested (e.g. /favicon.svg, /index.html).
These logs are utilized solely for network operations, server health diagnostics, and malicious traffic mitigation, and are automatically purged on a rolling cycle.
7. Children's Privacy (COPPA & Classroom Compliance)
GraphPages is designed to be completely safe for educational use in K-12 schools, homeschooling, and university classrooms. We do not require student accounts, do not collect personal information from minors, and comply with the Children's Online Privacy Protection Act (COPPA). Educators can freely introduce GraphPages to students without data-privacy compliance concerns.
8. International Privacy Rights (GDPR & CCPA/CPRA)
Under the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), users have specific rights regarding personal data. Because we do not collect personal profiles, store user accounts, or maintain document databases, we hold no personal data to disclose, sell, or delete.
If you contact us directly via email, your correspondence is used strictly to answer your inquiry and is never shared, rented, or sold to third parties.